Logo: Public Trustee
Click here to skip all navigation and go straight to the content
The principal officer of each agency shall ensure that the following Principles are implemented, maintained and observed for and in respect of all personal information for which his or her agency is responsible:
(1) Personal information should be not collected by unlawful or unfair means, nor should it be collected unnecessarily.
(2) An agency that collects personal information should take reasonable steps to ensure that, before it collects it or, if that is not practicable, as soon as practicable after it collects it, the record subject is told:
a) the purpose for which the information is being collected (the "purpose of collection"), unless that purpose is obvious;
(b) if the collection of the information is authorised or required by or under law - that the collection of the information is so authorised or required; and
(c) in general terms, of its usual practices with respect to disclosure of personal information of the kind collected.
(3) An agency should not collect personal information that is inaccurate or, having regard to the purpose of collection, is irrelevant, out of date, incomplete or excessively personal.
(4) An agency should take such steps as are, in the circumstances, reasonable to ensure that personal information in its possession or under its control is securely stored and is not misused.
(5) Where an agency has in its possession or under its control records of personal information, the record-subject should be entitled to have access to those records in accordance with the Freedom of Information Act 1991.
(6) An agency that has in its possession or under its control records of personalinformation about another person should correct it so far as it is inaccurate or, havingregard to the purpose of collection or to a purpose that is incidental to or connectedwith that purpose, incomplete, irrelevant, out of date, or where it would give a misleadingimpression in accordance with the Freedom of Information Act 1991.
(7) Personal information should not be used except for a purpose to which it is relevant.
(8) Personal information should not be used by an agency for a purpose, that is not thepurpose of collection or a purpose incidental to or connected with that purpose unless:
a) the record-subject has expressly or impliedly consented to the use;
(b) the agency using the information believes on reasonable grounds that the use isnecessary to prevent or lessen a serious and imminent threat to the life or health of therecord-subject or of some other person.
(c) the use is required by or under law; or
(d) the use for that other purpose is reasonably necessary for the enforcement of thecriminal law or of a law imposing a pecuniary penalty or for the protection of the publicrevenue or for the protection of the interests of the government, statutory authority orstatutory office-holder as an employer.
(9) An agency that uses personal information should take reasonable steps to ensurethat, having regard to the purpose for which the information is being used, the informationis accurate, complete and up to date.
(10) An agency should not disclose personal information about some other person toa third person unless:
a) the record-subject has expressly or impliedly consented to the disclosure;
(b) the person disclosing the information believes on reasonable grounds that thedisclosure is necessary to prevent or lessen a serious and imminent threat to the lifeor health of the record-subject or of some other person;
(c) the disclosure is required or authorised by or under law; or
(d) the disclosure is reasonably necessary for the enforcement of the criminal law, orof a law imposing a pecuniary penalty or for the protection of the public revenue orfor the protection of the interests of the government, statutory authority or statutory office-holder as an employer.